$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa File: a37593aa-4999-3250-9d18-4320c2f39adb.roa (raw, json) Hash identifier: pABTDieFTjniIYTYe0yz2BmtZbK0sVHEcfSHEy0mClk= Subject key identifier: BF:D3:59:C9:93:82:6D:84:C5:D7:0E:D5:04:3A:46:F2:29:9C:03:0A Certificate issuer: /CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff Certificate serial: 010D0C9F4328584AC4463C62636311E5A041BBA0 Authority key identifier: B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa Signing time: Wed 06 Aug 2025 13:00:42 +0000 ROA not before: Wed 06 Aug 2025 13:00:42 +0000 ROA not after: Tue 04 Nov 2025 14:00:42 +0000 asID: 2914 IP address blocks: 23.133.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:46:3c:62:63:63:11:e5:a0:41:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff Validity Not Before: Aug 6 13:00:42 2025 GMT Not After : Nov 4 14:00:42 2025 GMT Subject: CN=c3943b2d-f334-4030-8e68-0586eefbe854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:2e:87:d0:4c:8c:86:8d:36:5d:b5:62:3d: 26:f0:15:98:b8:43:14:05:07:c2:75:70:b6:7b:9e: 0e:00:66:5b:99:bd:b1:3f:15:7f:98:a9:f5:55:75: 47:63:62:47:28:b9:86:5e:0d:6d:b0:f4:c7:bb:df: 95:7d:38:7e:51:eb:81:90:67:69:15:b4:98:2a:33: fa:8c:f1:4e:24:33:37:3d:07:dd:18:54:70:40:62: b2:c6:3d:6b:23:86:c3:1b:a1:0b:76:16:37:27:02: 80:c4:16:c2:9b:6e:10:50:1e:3c:a9:01:f1:de:2c: e7:8f:55:99:e8:c1:c0:58:84:b1:cf:a6:d5:21:c9: 5e:53:79:62:a8:a9:c7:84:1b:01:20:d3:7a:4f:83: 2a:04:07:7b:30:0f:ec:27:b7:12:4f:1f:49:77:a6: ac:90:00:18:38:92:cd:c6:f3:c8:90:e6:4e:62:91: 53:f5:65:1d:08:92:13:d2:c4:6d:d4:48:ab:63:01: 35:23:7f:12:96:4d:05:84:90:86:a7:fd:e1:21:a7: 5e:27:3c:05:6a:b4:98:29:2f:3e:97:7b:7f:48:02: 31:9f:9c:07:8a:68:e5:99:91:bd:0b:5c:08:d9:0c: 36:b8:6a:bf:40:98:8a:f7:02:2c:0e:fd:17:6b:e1: b9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D3:59:C9:93:82:6D:84:C5:D7:0E:D5:04:3A:46:F2:29:9C:03:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.crl X509v3 Authority Key Identifier: keyid:B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer sbgp-ipAddrBlock: critical IPv4: 23.133.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:df:e0:c6:09:d0:ee:04:ca:5b:97:a4:75:9a:66:e1:6f:4c: 3d:90:49:80:b1:90:92:a6:98:c3:8a:0d:e5:74:67:43:54:a3: e2:c6:83:7b:21:97:27:6d:c4:a4:d5:03:14:73:0f:a3:07:b0: 58:d8:a1:0c:b2:5e:35:96:55:a9:8f:da:63:6c:df:2a:e8:b6: 88:9c:f1:94:b8:3a:9f:90:45:4b:c7:ea:61:a1:bb:7c:31:02: 5f:65:41:9d:d1:f2:91:f5:ea:04:08:93:4e:86:5a:d7:d5:33: cb:35:9f:60:9c:3b:2c:42:a2:1c:c3:a8:4b:7f:5f:7a:23:f5: 9a:24:bc:28:ca:0a:85:e6:e4:6e:f1:fc:ed:8e:67:8d:71:63: 6a:72:db:2d:fe:b2:80:63:3c:9b:84:87:40:34:1f:21:a0:86: 22:ff:9a:59:ea:b0:a8:b9:ef:54:de:54:94:2d:1c:13:9d:d9: 19:af:48:4e:77:da:ce:19:dc:99:aa:13:9c:72:2b:fa:82:03: 3b:b5:85:91:bd:80:aa:a5:d4:e3:87:99:76:88:b8:c6:7a:f4: 68:9e:8d:ef:af:b1:e4:8b:21:34:91:0a:fd:b5:54:74:a4:a4: 0b:8c:7a:46:d6:96:28:00:c7:5a:00:3f:80:1f:98:d4:57:27: a4:d3:02:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErERjxiY2MR5aBBu6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlmNmU1NDUtMTk0NC00Y2EwLWExNTUtNjlkZWQyY2Ri MWZmMB4XDTI1MDgwNjEzMDA0MloXDTI1MTEwNDE0MDA0MlowLzEtMCsGA1UEAxMk YzM5NDNiMmQtZjMzNC00MDMwLThlNjgtMDU4NmVlZmJlODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsQuh9BMjIaNNl21Yj0m8BWYuEMUBQfCdXC2 e54OAGZbmb2xPxV/mKn1VXVHY2JHKLmGXg1tsPTHu9+VfTh+UeuBkGdpFbSYKjP6 jPFOJDM3PQfdGFRwQGKyxj1rI4bDG6ELdhY3JwKAxBbCm24QUB48qQHx3iznj1WZ 6MHAWISxz6bVIcleU3liqKnHhBsBINN6T4MqBAd7MA/sJ7cSTx9Jd6askAAYOJLN xvPIkOZOYpFT9WUdCJIT0sRt1EirYwE1I38Slk0FhJCGp/3hIadeJzwFarSYKS8+ l3t/SAIxn5wHimjlmZG9C1wI2Qw2uGq/QJiK9wIsDv0Xa+G5OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/TWcmTgm2ExdcO1QQ6RvIpnAMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81OWY2 ZTU0NS0xOTQ0LTRjYTAtYTE1NS02OWRlZDJjZGIxZmYvYTM3NTkzYWEtNDk5OS0z MjUwLTlkMTgtNDMyMGMyZjM5YWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTlmNmU1NDUtMTk0NC00Y2EwLWEx NTUtNjlkZWQyY2RiMWZmLzU5ZjZlNTQ1LTE5NDQtNGNhMC1hMTU1LTY5ZGVkMmNk YjFmZi5jcmwwHwYDVR0jBBgwFoAUtr+vPh3qzjyMeeE8dUIb/8NkN5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81OWY2ZTU0NS0xOTQ0LTRjYTAtYTE1NS02OWRl ZDJjZGIxZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPf4MYJ0O4EyluXpHWaZuFvTD2QSYCxkJKmmMOKDeV0Z0NUo+LGg3sh lydtxKTVAxRzD6MHsFjYoQyyXjWWVamP2mNs3yrotoic8ZS4Op+QRUvH6mGhu3wx Al9lQZ3R8pH16gQIk06GWtfVM8s1n2CcOyxCohzDqEt/X3oj9ZokvCjKCoXm5G7x /O2OZ41xY2py2y3+soBjPJuEh0A0HyGghiL/mlnqsKi571TeVJQtHBOd2RmvSE53 2s4Z3JmqE5xyK/qCAzu1hZG9gKql1OOHmXaIuMZ69Gieje+vseSLITSRCv21VHSk pAuMekbWligAx1oAP4AfmNRXJ6TTAns= -----END CERTIFICATE-----Generated at Fri Aug 8 19:32:45 2025 by rpki-client